Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eaYmFl_Tzjdj0sz5QvO_HkjNQ-o.roa
File: eaYmFl_Tzjdj0sz5QvO_HkjNQ-o.roa (raw, json)
Hash identifier: 0PhU7ImIS6zkW2lo9JMdm4HpYT5qdSsFIfO8BQVkh7Y=
Subject key identifier: 79:A6:26:16:5F:D3:CE:37:63:D2:CC:F9:42:F3:BF:1E:48:CD:43:EA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4672
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eaYmFl_Tzjdj0sz5QvO_HkjNQ-o.roa
Signing time: Sat 16 Apr 2022 00:30:04 +0000
ROA not before: Sat 16 Apr 2022 00:30:04 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18034 (0x4672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 16 00:30:04 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=79A626165FD3CE3763D2CCF942F3BF1E48CD43EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:b9:e0:60:4e:53:40:1b:41:4a:01:07:f3:
62:42:cc:08:36:a5:38:7b:4b:6f:01:e6:1b:ee:b8:
f2:b5:37:30:9a:57:30:a6:db:ca:ac:af:55:8f:44:
4f:93:64:7d:5d:3c:99:fe:8d:8f:45:8a:92:63:a2:
45:5c:ae:19:69:81:26:01:43:3b:fc:07:87:92:0d:
7b:6e:32:91:68:bf:b7:c7:df:e0:0e:04:e4:26:98:
68:78:00:1e:1e:87:81:a9:49:5d:64:d1:18:e3:f7:
43:0a:2f:6d:1b:9f:8a:77:bb:45:ac:2c:c0:79:1a:
97:14:48:6a:67:91:15:97:ae:b9:74:41:6f:d2:5b:
37:bc:2a:e9:25:07:4d:79:69:66:96:60:90:d9:65:
15:1b:70:95:c3:1c:dc:c8:ee:be:a1:71:26:bd:84:
ad:80:82:ea:34:f9:86:db:ce:14:4a:ef:89:d2:47:
90:67:8b:e8:4e:4c:3f:99:68:28:4d:f4:f9:39:4c:
26:91:59:9a:ff:46:17:e6:59:d6:85:b6:83:10:f1:
42:a4:a5:8d:a4:4e:04:d8:7b:02:3c:0c:c0:41:59:
26:d8:c9:85:78:81:f3:c6:bb:81:97:2d:57:04:99:
ba:cf:42:8d:cc:3f:4e:c5:08:f7:57:2a:ae:d0:24:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:26:16:5F:D3:CE:37:63:D2:CC:F9:42:F3:BF:1E:48:CD:43:EA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eaYmFl_Tzjdj0sz5QvO_HkjNQ-o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
82:50:87:8f:0d:0f:bb:22:f8:5f:f3:e4:19:26:33:01:36:c3:
3a:3c:67:04:70:ea:6a:9b:63:d9:af:72:91:7d:30:0e:28:47:
3c:e6:63:2a:f2:26:20:b0:be:55:79:f8:7d:0a:b0:66:48:51:
4c:82:2a:b6:0e:80:a9:3e:97:62:7b:e7:a1:63:8f:3e:28:96:
45:9d:8b:86:ee:7a:08:77:04:7a:38:93:22:d0:95:1b:51:7e:
e1:c3:88:b7:05:e5:76:ae:1a:75:46:ba:7f:f4:a3:84:df:e7:
f0:de:e9:3c:92:8c:1c:47:74:5e:dd:44:9d:63:ba:89:15:28:
a6:59:8f:d0:13:62:68:23:5d:19:28:22:1e:50:28:d5:85:71:
e2:fc:91:c8:8c:83:ed:a5:dc:ea:c7:37:03:55:f5:3e:d6:0e:
8a:59:26:ab:ab:e8:b7:7b:e0:c2:b9:19:d5:c9:93:a0:fb:ab:
c4:43:91:85:23:33:5f:88:0e:eb:1c:a1:3e:a6:ac:db:70:20:
87:a8:00:b3:50:5d:c4:54:13:8d:3a:62:1b:89:98:34:96:88:
55:29:a0:42:6a:56:00:e4:0a:8a:0a:db:9c:8a:31:87:d5:7e:
66:b0:92:03:6d:e5:6a:80:6a:49:15:2c:4c:96:ed:96:38:33:
3b:e0:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org